CVE-2014-0196

Advisory lineage Upstream: 0 Downstream: 21
Analyzed
Published: 07 May 2014, 10:00
Last modified:22 Oct 2025, 00:05

Vulnerability Summary

Overall Risk (default)
medium
48/100
CVSS Score
6.9 MEDIUM
v2.0 (nvd)
EPSS Score
49.91% HIGH
50% probability -13.93%
KEV
Listed
CISA
1 listing
Ransomware
No reports
Public exploits
3 found
Dark Web
Not detected

Timeline

07 May 2014, 10:00
Published
Vulnerability first disclosed
12 May 2023, 00:00
Added to CISA KEV
Linux Kernel Race Condition Vulnerability
02 Jun 2023, 00:00
CISA Remediation Due
The impacted product is end-of-life and should be disconnected if still in use.
22 Oct 2025, 00:05
Last Modified
Vulnerability information updated

Description

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • v2.0•MEDIUM•Score: 6.9AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 49.91%• Percentile: 98%

Techniques & Countermeasures

  • CWE-362•Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

    The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Affected Systems

  • canonical•ubuntu_linux

    10.04 | 12.04 | 12.10 | 13.10 | 14.04

  • debian•debian_linux

    6.0 | 7.0

  • f5•big-ip_access_policy_manager

    ≥ 11.1.0, ≤ 11.5.1

  • f5•big-ip_advanced_firewall_manager

    ≥ 11.3.0, ≤ 11.5.1

  • f5•big-ip_analytics

    ≥ 11.1.0, ≤ 11.5.1

  • f5•big-ip_application_acceleration_manager

    ≥ 11.4.0, ≤ 11.5.1

  • f5•big-ip_application_security_manager

    ≥ 11.1.0, ≤ 11.5.1

  • f5•big-ip_edge_gateway

    ≥ 11.1.0, ≤ 11.3.0

  • f5•big-ip_global_traffic_manager

    ≥ 11.1.0, ≤ 11.5.1

  • f5•big-ip_link_controller

    ≥ 11.1.0, ≤ 11.5.1

  • f5•big-ip_local_traffic_manager

    ≥ 11.1.0, ≤ 11.5.1

  • f5•big-ip_policy_enforcement_manager

    ≥ 11.3.0, ≤ 11.5.1

  • f5•big-ip_protocol_security_module

    ≥ 11.1.0, ≤ 11.4.1

  • f5•big-ip_wan_optimization_manager

    ≥ 11.1.0, ≤ 11.3.0

  • f5•big-ip_webaccelerator

    ≥ 11.1.0, ≤ 11.3.0

  • f5•big-iq_application_delivery_controller

    4.5.0

  • f5•big-iq_centralized_management

    4.6.0

  • f5•big-iq_cloud

    ≥ 4.0.0, ≤ 4.5.0

  • f5•big-iq_cloud_and_orchestration

    1.0.0

  • f5•big-iq_device

    ≥ 4.2.0, ≤ 4.5.0

  • f5•big-iq_security

    ≥ 4.0.0, ≤ 4.5.0

  • f5•enterprise_manager

    3.1.0 | 3.1.1

  • linux•linux_kernel

    > 2.6.31, < 3.2.59 | ≥ 3.3, < 3.4.91 | ≥ 3.5, < 3.10.40 | ≥ 3.11, < 3.12.20 | ≥ 3.13, < 3.14.4 | 2.6.31 | 2.6.31:rc3 | 2.6.31:rc4 | 2.6.31:rc5 | 2.6.31:rc6 | 2.6.31:rc7 | 2.6.31:rc8 | 2.6.31:rc9

  • oracle•linux

    6

  • redhat•enterprise_linux

    6.0

  • redhat•enterprise_linux_eus

    6.3 | 6.4

  • redhat•enterprise_linux_server_eus

    6.3

  • suse•suse_linux_enterprise_desktop

    11:sp3

  • suse•suse_linux_enterprise_high_availability_extension

    11:sp3

  • suse•suse_linux_enterprise_server

    11:sp3

References (29)